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mmm 

[fif^l] MEI»a5^&*J«S*l5WANi:LANfc©rafef» • 

atJitcj: ytteK-rs-fe^ay-^-r * ^- r^x-f^gcfcttsvPNjifg^Si-e 

feot, fJVJVTy-fWiMT'WANlzmffilsf-ftffl&PClZttLT I P s e c 
zfu r-=r;wc<j;y VPN -?Z>ffi. I P s e cjifmc&izo I KESt-fgU^C 
, DHCPlft^^3>?: I K E U h 'J > ^£ftfc I P/n° 
>ry McfcttS I P s e cflt.31£ft£j£#7tl P 7 F l/X©»£&££5i?-<&-fe3f 

^^^LANicr^-fex-rsitfga^is^pccsiy ^r. i&hb^sopcs:^ 

>f • f- htfoc-f ^glCfcttSVPNjtM^m, 

3 ] N A TW^^m^t>^:X lagB^P© P ClCL A NgBTT'^ffl L 
TV^^-f*- h I P7F^I: I KEaf§B#K:ff#U zf^-i^- MPT 
F U X *C*3S3 ft fc L A N Slt«^©tlffB^»© PC^f,079tX tfnftB & V P 

[0 0 0 1] 

*mmi*. UtSt©PCS:g!«lbfeLAN^^*ia|R*iif<Z)WAN (Wide 
Area Network) • 3Eifc*&3g & ^ £ iUCfc y SHR-TS-fe^r 

a.y^-f • 4*- htf x>f$SttTf*#3ft<5*y hy-*8Wcfc^T, &Mmm 
l:^>ft^7yyiibf^©PC^WAN$:^Ltt^aiJf>f • 4*- h ^ 
i-fif tVPN (Virtual Private Network, ^2®^ 
MM) m&^fcftOt^aiJf-f . ;f_ h^7x-f(BI«JCfeW-SVPN3i1g* 
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[0 0 0 2] 

^ic-rS^^ LANfcWAN^tS^- h^x-f^g^^tC^So £fc 
[0 0 0 3] 

f tt, ^gpa^y^-t^-rspc (^spodpc) h-fe^a-u^w -y-h^oi 

^S- VPNM^fc&^fS^tlft&Mfg^n hn/ut. LTH^£4xTV*£ 

IPsec (Security Architecture for th 
e Internet Protocol) T$>S D 
[0 0 0 4] 

JgTRC I P s e c€:3ftIfflLfcVPNji#©«5IS:lttW"t«. tf04 
b)&A^ii^t5 0 04 ttWAN2:-g-tf-^65^^y h^-^i/^^ti 

[0 0 0 5] 

04&C;!3^T, 1 0 1 i*7uA^ #lZ#J J ?)];ry'7mmist=.ft3<DP C, 1 
0 2 &WAN, 10 3 SWAN 10 2 i:M©LAN 10 4 5:iiUTM • ^ 
mmmZftotlr^V'rJ • h?:c>|\ 1 0 4 tt-fe^faU-r-r • hVx. 
•f 1 0 3@ST©L AN, 10 5ttLAN10 4±©t-/tj|*, 10 6, 107 
SLAN1 0 4±(D>7 T> hPC, 1 0 8ttPC 1 0 Utdfa<Jf>f • ^ 
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- h^x-f 10 3 £<DmT*I P s e c jM&fr^ fc#>lC?t3££*l£: V P NT?&S 

o 

[0 0 0 6] 

^>f^77^iiLfcPCl 0 l^LAN 1 0 4 _t©$£5MCT * •fe^'T S# 

^ -fedprLU^-f • h^ai>r 103 i:cor4"ey pn ios fc^iitu wan 

1 0 2±T^2®^^*M^^$:^-rS„ 3-9 LTWAN 1 0 2±T*5Hg|*« 

&%os • Mnf^anj^jcu lan i o Amr<Dm^.nMm^nz>o 

[0 0 0 7] 

#JC, I P s e CJi#S:f^■5fc«>^Ci&5l*jaM^©IR5I^Cov^TH5€:fflv^ 
TillfttS. 05liWANfCj:-5MI:^tWANii0tSSo 
[0 0 0 8] 

B5CfcV*T, PC 1 0 1, WAN 10 2, -fe^ra.y ■5 L -f • >f- h^ai^T 10 

3 &@4 trai»©*><z> ,, e&s 0 

[0 0 0 9] 

PC 1 0 1 £-t?3f^.y^>r - >f- h^:r-f 103t© 2j&HT? I P s e cSI 

Ts WlCWf#T?ttfll*€:^»'e»Sfe'f-«*Sji:, IKE (Internet 
Key Exchange) h SSSKje-rS^iS© 2at*J 

[0 0 10] 

tfUC, 0 6 fcMV^T I P s e clfCo^ttiiitSo S6&IPse df 
ffij&(Dl=.#><D±3r*. ' tf— V Vzl^ 1 03 ©J&fls&a^f^n— — hi? 

<£><&<> 

[0011] 

i p s e cmmzfi ?r=.tbiziz, 2&mxMj3fa^nmmte^*vzsn> s a 
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(Security Association) &5t;ftb&tt*U£&£>&VN 0 
CDfciMC I KEMM&2o©:7x--XlC#;^*lT^T. 7i-Xl tCfcV^T££ 
fcl K E SAt ?c O #> tf) I K E — S A $:5S5i b <fc "5 £ L (S 1 1, S12) , 
ZfrlZf&JbVfcb, 7ai-X2lCfcVNT. IPsecIftSfc4?)©ifi*i:' 
<D±^t=lV t4 mm$:&i&^-Z> (S13) 0 7i-X2tIPsec-SAfei 
ttZZ}ltfT*%n& (S 1 4) I KESHS&iKFTU IPsecIf«t 
-5 (S 1 5) . 130IKE (:7;n-X2) ji-fgtC^T I P s e c 

[0 0 12] 
[^1] 
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ESP/AH 


IPsecMm^E— H 








KHHi 





















[0 0 13] 

teblfrf^- F (I P s e ciHs=E- K) iCOV^te, t^a'Jf-f ^-f, 
tH^T'^^CD"?, d^te, I P s e c©l^=E- Klih^^M- K©&5: 
[0 0 14] 

® 7tt h^^;!/^- FOIPse c?lM©«llS:^^"SiWElT^-5c 
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[0 0 15] 

S7 1C£V^ PC 1 0 1, 1Z*a.V"r-( • h9a:>f 103, LAN 1 0 
4, ?7>f7>hPC106, VPN 1 0 8 £04 HmffiO&W&Z* 100 
tt I PA">try ht'^S, 
[0 0 1 6] 

E7lC;i3^T, PC 1 0 1, t*a»Jf^-y-h!?x>fl03, #^>f 7> 
hPC 1 0 6(0 I P7 K^Sr^tl^A, B, ChtS (Ali^n /W ^flCJ: 
oTPClOl tC#-^3;ft£: I P7FUA) o LAN 1 041©^7>f7> h P 
C106^e>VPN10 8S:^l/T3*^S/a>©Sfie>*lfePCl 0 11CI PA 
^r^b$:MtS^, £-r*^-f7>h PC 1 0 6K;fcV*T, SUBtgIPTF 
l/*#C, JBifc I P7 Kl/XtfA© I P/^y M 0 O^rtSii, jum^tts 
o t^ra y • 4*- h^7i>f 1 0 stfr©/*^* MOO ^^f VPN 1 

0 8 £3g£>*l£PC 1 0 13(gT<Z)A^ry hT*$>Z>Z.£*mM-t2>t.. I KEStfg 

&c£Sxi&L-fc'ff#Jcg^^T i p;^y M oo^^^tu >ns 0 tc^I 

P7 Kl^XOD^MRUC, IfjcIP7F^B, ^IPTKl/^AOIP^^^ 
h^<DMUWm(Oftta, m-%iti$ftfc>tlZ> 0 VPN108^LT*^t'J>^ 

$4xfeA°>r^ M:fiifepc i o it*, £f&Lfcft#ic«^T:&:/iry 

$tifejc0 I P M 0 0 $:«{(J{BU %mirZ> 0 
[0 017] 

b £ e> h-r s^s] 
wan i o 2jt-e©7 i -#<z)££'[£iM&-e%Tv^#\ &<*-e 

#8P*y hy-**^07*i*:*£Wft£*l5£«>, LAN 1 0 4gBT©?^>f 
T> hPC 1 0 6©^#lCT^-feX-r^>fcfeJC, LAN 1 0 4@BT<Z>*^>f r> 

h pc i o 6tc^ (r^-fexfFor/^nr^^-r-fe^^y ^ • ^ y */-<z>ig 

«*.fcm«T-f* I P7 KU^fc^ffnJTiifcS^n • -9— fc?*&£) # 
&gjcfey, *©K^OfcAtCj8lJ(Z)^tt<Z>ISIH*«^l5S«riBffi3!)«&»J, LAN 

1 0 4*^7>f^- MPT Kl/^-e*JsRStlfe*y h9-^©i^ ^£©iS:5t 
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[0 0 18] 

z.(d±^-=lv^4 - hy^jmmz&v&v PNmm^-eit. wan$: 

[0 0 19] 

as k & w s v p n m m %m & is & -r * ^ £ £ @ & n -r s . 

[0 0 2 0] 

Mot, ^^^;i/Ty^^^WANlC^bfe^(DPCtC*[-bT IPs 
e c-fU hn;i/lCj: yVPN^3|t§^ I P s e c jffslC^O I 
H£{C, DHCPlft^^3>?:IKEf-^lC^b> h > # U > ^£ *l£ I 
P/^^ HCfctf* I P s e c#L3l£*l£ji£'@7El PT Kl/XCDfBS&^'tS 

[0 0 2 1] 

ZltllCfc »; % WAN^^lyT^^^T^-feXt-^PC^^KHCL ANIT 
[0 0 2 2] 

43i*iaiR3feif^e>**Rsn*wANi:L ANtorasm • umwm 

T, ^-f^;i/Ty^^TWANlC^bfe^gpa)PClC*fbT I P s e czfU 



ffifE# 2000-3094181 



11—344500 

hn;MC<fc *) VPNm3St§^, I P s e cjI^Cft&o I KEji#B#lC % D 
H C PMfa^frZfZs 3 > S: I KE^-^IC^L. h>*U y?2tlt=. I P/\°>r y 
MCfcttS I P s e c«t3lS*i«39S#7CI PrFUysOmfeZmiftirZZttlL 

[0 0 2 3] 

fc^gPtf)PC£ I P s e cjiM-TSI^, ^©PC©S^^5a$feI P7KVX$: 
[0 0 2 4] 

> sn^i Knaiaa-fe^u^ • ^~ h^oi-r^{cfewsvPN7i#^ic 

h© I PT Kl/^/t^f bvx^T Kl/^^^>f^^7^^ii^ 
e> LANlCT^-fe^fS^OPCtcaiU^T. ^©PCSr-fc^lftlCL ANgt 

^rncgv^ v p Nmmzmm~f z z. t 1 ufe%©T*^s 0 

[0 0 2 5] 

3<D«*JCj:y, VPN£^irLfc^3lS©PC#LAN^ft{C&S£-?lC^ 
[0 0 2 6] 

ff^3&ciB^cD-fe3r^y^ • ^-h^a:>fSieK:feW*VPNji#*Stt 

feV^T. N AT^$rM*^t)-tirT^aiJ©PCtCL AN@STT^fflbTV^-g,>' , ^ 
-f ^— h I PT I KEji#B£lc##U ^9>f ^- h I PTFU^ti 

is $ ti l a n mm *\ (d <d p c a* e> © r * -t x # «r te & v p n m m & -t 

[0 0 2 7] 

i/ fe * * ^aj© p c a* e> #>7 * -fe x &«rfgjc-r s £ v^ e> &m zm-tz „ 
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[0 0 2 8] 
[0 0 2 9] 

{mMom& i ) 

SVPNjl-fl^&tCfcV^JgVAS I K E Jifff %~7 He — T V V ^t7^-V 
[0 0 3 0] 

03&C^cfii»j, IKElfttUDP (User Datagram Pr- 
otocol) /IP (Internet Protocol) LT ?f =b 
*l£ 0 IKEf- ISAKMP (Internet Security 
Association and Key Management Prot- 
ocol) s\y#<Dmz I SAKMPK>fn - KMoi: f ©Jglti < 3 i: 
T-mmZfrZ* IKEMMWU «^tjlS:S#^S*&»# (>f-2/x-*, Ini 
t i a t o r) £-£;mcMLTjS;^'r&fS^# (U X3JO#\ Res-pond 
er) tC*oTfft>n«. #Hi£©7£ffiC&^TB:, H4fC;J3^*C, -?urmt 
C^W*;^lT>f>*-*9 hJCifeRLfcPC 101#Initiato 
rt&U, LANlO4±0S§*i:bT0^7>f7>hPClO6, 1 0 7 ICT 
Z-bX-tZfcltoK. -feSfo-i;^ • h^cr-f 1 0 3JCI KEiM&BM&U 
-fe^faU-r-f • y~ h-)x>fl0 3^RespondertUI KEjifSS:*? 

e>„ (^i) {c#iffc^s©e>t>. tiHHt^mEtti** ^ro«i«#^s:sMv^T 

InitiatortResponde r CD^T-Uff $8#3C$£ *l& 2>\ ^JUSA 
Initiator^itSU Respondertflniti 
a t o r Oii^^cp^^SjS^^^Srjgf? L/T/JS^^S ilVO"**" — A/^^-Y T 
> h^-r^^frfctiSo DHCP (Dynamic Host Configu 
ration Protocol) ^7^f7> h tbtOPC 1 0 1 
f^S0ffii:bT, IP7KU^ W*; hTZj', IP7Kl/^0fi)l 
BS, F*>f>;&#&3o ^^^4 o£>1f#£ I KEM-fllC^TRe s p o n d 
e r"£$>Z>±3r=L V <t4 • f- h^ac-f 1 0 3 tfjtS© IKEf-fT'^>3 
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[0 0 3 1] 

01 li*^^©HJg<Z)^l tCiS^S I P s e cMM©eEI^S:^"r^^®T*S> 

So 

[0 0 3 2] 

BllCfcV%T\ PC101, •fe^rAy-r-'f • ^- h-)i>f 1 0 3, LAN10 
4. ^7>f7>hPC106, VPN10 8iia4tBlO%CDT'fe5o 
[00 3 3] 

Biicfcv^x, pcioi, -fe^f a. y 5^ - ^-h9x>f 103, ^^-rr> 

h PC 1 0 6CDI PT Kl/X*-€-*l-?*lA, B, CfctS (Att^n/^>f ^IC J: 
oTPC 1 0 llctf#£*ifc I P7K^) o I P s e cSUBKlSfc&o I 

KEjtfglCJ: t^faUf-f • ^~ h^x>f 10 311 PCIOIJCIPTK 
U'XDSriB^-rSo LAN 1 0 4 ±<D *9>f T> bPC 1 0 6^&VPN1 0 8 
5:^LT3^^^H>03|f)tltPCl 0 1 K I h fcaHrr**^, * 

f^7-f7>hPC10 61C£V\T, LAN 1 0 4 Wt^n/H^CioTP 
C10 lJCfffy^T&nfcl P T Kl/XAI:tltS^i:&<, 3H§7*I PT K 

i/x^c. i p 7 k 0 1 p 7 m o 9 m$ mmztiz 

0 irJra'Jr^ -^-h9i>f 1 03^i©;^7 M 09 £^#U VPN 1 
0 8 ZmbtltcPC 1 0 1^T©/N°>!r^ h^S>-5 3t§r^SfJi-Sh, I KEjifs 
lZ&Z>&mLf=.mmiz£-3^T I P^>y M09 U >^-T€> D tc© I 

P7F X/7s<D$\>M^> ^tfif 7t I P7FI/XB, P7KI/^A0I P^\y # 

#tf;&ti3*iS D rcoi:^^g|L,feW^lc^VNT^^izy P7i/ry 
h^©33EflMR©tfiIK B^#>ffc^ft>tlSc VPN10 8^lT^)^t'J>^ 
■Ztifcrtfy b^ffltPC lOUt ^mLfcWfgiCg^T^-fey 

PA^ry M09 &5t*J ffiU I KEiiMiCj: UIfc#L£1*->f*y 
h7X^, K*-f >££tg&C I PJ^frv M 09 Sr^S-TSo 



9 
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[0 0 3 4] 

@2ttt^ra'Jf>f • >f- h?x-fl03#PC10UCl P7 FU^D§:iB 
[0 0 3 5] 

I P s e cjmfc^fe&ictt, 2*mT*Ml5ftlzW!m&!ten*?i/m ys A 
£tfl3£L&tt*U;£&£&V^ I KE^#&2o<Z>:7;ii-XlC#;fr;riT 

V>T. 7x-Xl lC;feV^T5§:^& I KEjtfsfcfi^fc&tf) I KE-SA&ffit££l/ 
<fc3 £L (S 1. S2) , ZtllZ&tyLfeb. 7:n-X2lCfc^T, I P s e c 

mmirz&&(Dmmmte¥&^*3-v ; r>rmm*:&m-tz> (S3) . 71-X2 

T? I P7Kl/^DI:|il^U I P s e c - S A $rfiS^f & ZL£#T?£tlfc£ (S4 
) I KEjUgfc^T-tS (S5) 0 ^f«y^S3©IKE (:7;n-X2) jt-fglC 

jsv>t i p s e cmmzn of=.8>iz2&mv&mztiz>mm$ (mi) k^m. 

[0 0 3 6] 

ilfePClOl IC^fLT I P s e c ~?U h=r;i/lCj;»; V PN 10 8 fc^^S 
|gt I P s e cmm\Z%^L-0 I KEjl^^tC, DHCPIf t7°i/a>l: I KE 
•^-^tClfr&U PA^ry McfeWS I P s e c&S^tl 

ZxkmKl PT Fl/X<om& (TFI/XC©M) £Hg|-tSJ:e>JCb£r£&C 
<fcy, -fe^n-U^ • ^- h^oc-Y 1 0 3 it. ^7^7^fllfcM©P 
ClOltlPse cmm-?Z>$k. ^(OVC(D^m^t^%l P7F A Itffl 
flpoIfglCU LAN 1 0 4I2T©*^-f T> 0 6A©tg^5:^||ttS 

[0 0 3 7] 
(HI©^I2) 

*|§^CDHSfe(D^S2lCj:§-fe^r3.U^'f • 4*- h tf x>f ^glCfctfS V P N 
[0 0 3 8] 
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M 1 ICfcV^ IKE M^a(D R e s p o n d e r ^feS-fe^ V ^ A • f— V 
^i>fl03^f)Init iato rt'feSPC 10 1 \Z D H C PW^^M^-f 
-fe^roL'J^-f • V- htfocf 1 0 3 gBT0> LAN 1 0 4 H RT D1Z > 
h©IP7K^, -Vr-7**j ^IB^S. VPN 1 0 8ifit©I P s 

e cM^lCi3V>T, VPN10 8±l:MS;^>yhMH LAN10 4^g|S 
^e>iit5PC 101%, -fe=3r^U^>f • h^x>f 1 0 3KT©*^>f 7 
>b3g*l 0 6t^f h±ES!J<Z>fcVV Lfr4L>-SfcS§8*£ b 

[0 0 3 9] 

Vol^C 1 0 3 SBTtf> LAN 1 04i:|SID-fe^^>h©I P7Kl/Vt^f h 
7X^rKl/X5:^-1r^7y^iiA^LAN 10 4 ICT? P C 1 0 

1 Km*) ^T, #3Btf>PC 10 1 £4K2®lfrlCL AN 1 0 4 ^TtCg^fc V P N 
mm%:ni%-*Z>£ofcLt=.Z.illZ£ »J, VPNIO 8 &flfcftLfe*asCDPC 1 0 
1 #LAN 1 0 4 3|t#l*K:&£<fc3C««»fc#fc^;i£#T*££<Z>T?, gc^tt 
€:l««Ufe**^aP3^feL AN 10 4 ft©3§5MCT? i2 3 fc#Tf£S. 

[0 0 4 0] 
3) 

*«9!©^J6©^lB3K:j:S-fe^r3.yT--f • b ? x-f ^SfC&tf £ V P N 
[0 0 4 1] 

01 JCfcHT, t^aijf-f • H9i>f 103j^NAT ( Net-wo 
rk Address Translator) gtfff&fljv^ -fe^fa. U^-f • ^* 
-b^x>f 10 3 UBTtf) LAN 10 4 fc:/9>f h I P7K^©*T«||*b 
Tl^feft^ I«tt^»**&LAN 1 04±©^7-f7> hSg^l 0 6lCttT? 
•feXT'^&V^ #>f^;i/7v:/|fciRL-fePC 10 1 il«a>JN • h 1 ^ 
i>flO 3AWPN 108 %m&-?Z>fc&><D I KEjfi^OtfJT?, -fe 3f a. .U -r -f • 
>f- b^x^f 1 0 3 SET© LAN 104 TfftjgStbT^-S-fe^:* > btCfcttS, 



1 1 
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*-7S/a>K.£V PC 1 0 1 {CfB^-r^r i:lCi: »J, WAN 1 0 2_tlC&SVP 
N 1 0 8±liyo-A;H P7 FUXt'IfL^f,, LAN104fi, ^bt 
PC 1 0 1 O^Til ^^-f h I P7Kl/XT^>y hV-VTztfty h± 

[0 0 4 2] 

01CLAN10 4fBT"e^MbTV , >£:7^-'f MPTKl^XSrl KEjifg 
BHctf^U Zf^J*- V I P7Kl/^ii$tlfcLAN 1 0 4^^\©^g|$ 

^^©T^-fex^nrii^vpNM^^^-ts^^icbfcr^c^y, -j*?**. 
©pcioi *^©T^-fex^Brigic^-g> 0 

[0 0 4 3] 

gic^^s v p Nmrn^mzzmt. mhh^^^m^^swan ^la 

^SVPNli^T'feoT, ^-f-Y^Ty^MT'WANlC^bfc^CDP 
CiZMVXI P s e c^n hn;WCj: UVPNSrHSfSK, I P s e cSfalC 
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